New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Runtime Trace Bom

by cdxgen in cdxgen/cdxgen

Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and…

Apache-2.0Auto-check passedSecurity

Install Runtime Trace Bom

skills CLI
$ npx skills add cdxgen/cdxgen --skill runtime-trace-bom -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install cdxgen/cdxgen runtime-trace-bom --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/cdxgen/cdxgen.git skills-src && mkdir -p .claude/skills && cp -r skills-src/claude-plugin/skills/runtime-trace-bom .claude/skills/runtime-trace-bom && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
runtime-trace-bom
GitHub stars
1.1k
Token cost
~2k tokens
SKILL.md length
677 words
Files
1
Skills in repo
17
Repo updated
First seen
Licence
Apache-2.0

At a glance

Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and…

  • Works in 3 steps: Show the user the exact --cmd you intend… → Confirm the command is one they want… → Never trace a command whose source you…
  • Asked what a program actually loads
  • SKILL.md covers Confirm before executing, Basic use, Sandbox limits and Filesystem access, plus 6 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Runtime Trace Bom is an agent skill from cdxgen/cdxgen. Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and cipher-suite usage, child process execution, and filesystem mutations. Use when asked what a program actually loads or calls at runtime, for a dynamic or runtime SBOM, to observe a binary's real behaviour, or to trace network and crypto usage of a process.

Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Supply chain security and Cryptography. The repository describes itself as: Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with…. The licence is Apache-2.0.

When your agent uses it

  • Asked what a program actually loads
  • Calls at runtime
  • Observe a binarys real behaviour
  • Trace network and crypto usage of a process

Example prompts

  • “Use the runtime-trace-bom skill to produce a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing…”
  • “/runtime-trace-bom”

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. Show the user the exact --cmd you intend to run and the sandbox limits.
  2. Confirm the command is one they want executed now.
  3. Never trace a command whose source you have not seen, and never trace something the user has described as untrusted without saying plainly…

What it can do on your machine

Read from SKILL.md and the folder at commit 5497d57. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • cdxgen.github.io

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Runtime Trace Bom loads about 2k tokens when it runs. Until then it costs about 117 tokens; SKILL.md has 677 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~117
When it runs · the whole SKILL.md, loaded when a task matches
~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from cdxgen/cdxgen at commit 5497d57, republished under its Apache-2.0 licence (© cdxgen). 677 words, ~1,957 tokens.

Download SKILL.mdSave it as .claude/skills/runtime-trace-bom/SKILL.md (or your agent's skills folder).
name
runtime-trace-bom
description
Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and cipher-suite usage, child process execution, and filesystem mutations. Use when asked what a program actually loads or calls at runtime, for a dynamic or runtime SBOM, to observe a binary's real behaviour, or to trace network and crypto usage of a process.

Runtime-traced BOM

tracebom runs a command under the @cdxgen/safer-exec sandbox and records what it actually does: which shared libraries it dlopens, which HTTP URLs it reaches, which crypto primitives it exercises, which children it spawns, and which files it mutates. The output is a CycloneDX BOM with library components and enumerated services.

This is observation of real execution, not static inference. It complements sbom-generate rather than replacing it: a trace shows only what the traced run exercised, so it under-reports by design.

Read reference/safety.md first.

Confirm before executing

tracebom executes the user's command. Treat every invocation as a confirm-first action:

  1. Show the user the exact --cmd you intend to run and the sandbox limits.
  2. Confirm the command is one they want executed now.
  3. Never trace a command whose source you have not seen, and never trace something the user has described as untrusted without saying plainly what the sandbox does and does not contain.

The sandbox restricts filesystem, network, and process behaviour. It is a containment boundary, not a guarantee against malicious code.

Basic use

bash
tracebom --cmd "node app.js" -o /absolute/path/to/bom.json

Aliases as a project type: -t dynamic / -t trace.

Evidence recorded on traced components uses technique=instrumentation, scope=required, confidence 0.8/0.5, plus hashes and OS package attribution.

Sandbox limits

FlagDefaultPurpose
-d, --working-dircwdWorking directory for the traced process
--timeout60000 msTrace timeout
--trace-period—Stop tracing after N seconds
--max-memory512 MBMemory ceiling
--max-cpu—CPU cores, fractional (0.5 = half a core)
--max-processes64Process count ceiling
--strictfalseTreat sandbox setup warnings as hard errors

Use --trace-period for long-running or persistent commands — a server will otherwise run until --timeout. Use --strict in CI so a degraded sandbox fails loudly instead of silently tracing less.

Filesystem access

FlagDefaultPurpose
--read-paths—Extra read paths, comma-separated
--write-pathsOS tmpdirSandbox write paths
--allow-hiddentrueAllow hidden files and directories
--difffalseTrack files created, modified, or deleted

--diff is the flag to reach for when the user's question is "what did this installer/build script change?"

Network

FlagDefaultPurpose
--disable-networktrueNetwork off inside the sandbox
--trace-http-urlsfalseeBPF HTTP URL tracing; automatically enables network
--allow-host—Hostnames the process may reach
--allow-port—TCP ports allowed
--allow-url—Fine-grained URL allow rules
--allow-listen—IPs or ip:port the process may bind

Network is off by default, and --trace-http-urls turns it on. Say that out loud when enabling it — the user is choosing to let the traced process reach the network.

bash
tracebom --cmd "node app.js" \
  --trace-http-urls \
  --allow-host api.example.com --allow-port 443 \
  -o /absolute/path/to/bom.json

Keep the allowlist narrow, consistent with the host-allowlist rule in reference/safety.md.

Platform constraint: eBPF HTTP URL tracing is Linux-only, needs kernel

= 5.8, and requires CAP_BPF. On macOS or Windows it will not work — do not present its absence as a cdxgen failure.

Show full SKILL.md (230 more words)Show less

Crypto tracing

FlagDefaultPurpose
--trace-cryptotrueeBPF crypto library and cipher-suite tracing
--crypto-probe-modetls-onlytls-only, or operations for digest, encrypt, sign
bash
tracebom --cmd "node app.js" \
  --trace-crypto --crypto-probe-mode operations \
  -o /absolute/path/to/bom.json

Also Linux-only with kernel >= 5.8. Use operations when the user wants observed cryptographic operations rather than just negotiated TLS; pair it with crypto-bom for the static side of the same question.

Process execution

FlagDefaultPurpose
--trace-execfalseLog every child process spawned
--allow-exec—Executables the command may run
--block-exec—Executables to block
--block-forkfalsePrevent forking new processes
--allow-envs—Host env vars allowed through the sandbox

--trace-exec is valuable for build scripts and postinstall hooks, where the interesting behaviour is what gets spawned.

--allow-envs passes host environment variables into the sandbox. Do not pass credential-bearing variables unless the user explicitly asks and understands they will be available to the traced process.

Output

FlagDefault
-o, --outputbom.json
--spec-version1.7
--project-name—
--project-version—
--printfalse

Interpreting a trace

  • A trace records one execution path. A library not loaded during the trace may still be loaded on a different input. Never present a trace as a complete dependency inventory.
  • Conversely, everything in a trace was genuinely loaded — that is stronger evidence than a manifest entry.
  • Compare a trace against a static SBOM to find declared-but-unloaded dependencies. Combine with bom-evidence for reachability before concluding a dependency is unused.
  • In cdxi, .instrumented isolates the trace-derived components.

Reference

© cdxgen, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in claude-plugin/skills/runtime-trace-bom of cdxgen/cdxgen.

Open the folder on GitHubat commit 5497d57

Compare with similar skills

Runtime Trace Bom next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Runtime Trace Bom compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Runtime Trace Bom this skillcdxgen/cdxgen1.1k—~2kAutomated safety check: PassApache-2.0
Security Reviewvalory-xyz/open-autonomy129—~11kAutomated safety check: NotesApache-2.0
Implementing Sigstore For Software Signingmukul975/Anthropic-Cybersecurity-Skills34k—~3.2kAutomated safety check: NotesApache-2.0
Skill Scannergetsentry/skills1k4 repos~2.5kAutomated safety check: WarnApache-2.0
Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit4791 repos~3.3kAutomated safety check: PassNone
Eu CraSushegaad/Claude-Skills-Governance-Risk-and-Compliance9391 repos~4kAutomated safety check: PassMIT

Similar skills

  • Security Review

    valory-xyz/open-autonomy

    Security review of an open-autonomy agent service — cryptographic key handling, dynamic code execution, ABCI authentication and replay, secret exposure, dependency supply chain, and deployment…

    129 GitHub stars~11k tokensUpdated 23 days ago
    SecurityAuto-check: notes

  • Implementing Sigstore For Software Signing

    mukul975/Anthropic-Cybersecurity-Skills

    Implements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparency log verification, and Fulcio certificate authority integration to establish cryptographic…

    34k GitHub stars~3.2k tokensUpdated 1 mo ago
    SecurityAuto-check: notes

  • Skill Scanner

    getsentry/skills

    Official

    Scan agent skills for security issues. An agent skill from getsentry/skills.

    1k GitHub starsUsed in 4 repos~2.5k tokens
    SecurityAuto-check: warnings

  • Serenity Aleabitoreddit

    yan-labs/serenity-aleabitoreddit

    Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.

    479 GitHub starsUsed in 1 repo~3.3k tokens
    SecurityAuto-check passed

  • Eu Cra

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the…

    939 GitHub starsUsed in 1 repo~4k tokens
    SecurityAuto-check passed

  • Kesekit Check

    cdppcorp/KESE-KIT

    Run a pre-deployment security compliance checklist based on KISA guidelines.

    359 GitHub stars~1.3k tokensUpdated 6 mo ago
    SecurityAuto-check passed

More from cdxgen/cdxgen

All 17 skills in this repo

  • AI Bom

    cdxgen/cdxgen

    Generates AI-BOM, MCP inventory, AI skill inventory, and AI authorship provenance documents with cdxgen, cataloging models, inference services, Hugging Face purls, MCP servers and their…

    1.1k GitHub stars~2.5k tokensUpdated yesterday
    Auto-check passed

  • Bom Audit

    cdxgen/cdxgen

    Runs supply-chain risk analysis on CycloneDX BOMs with cdx-audit predictive auditing and cdxgen --bom-audit embedded rules, covering npm and PyPI package compromise posture, CI permission risk…

    1.1k GitHub stars~2.4k tokensUpdated yesterday
    Auto-check passed

  • Bom Evidence

    cdxgen/cdxgen

    Enriches an existing CycloneDX BOM with occurrence, callstack, reachability, data-flow, and crypto-flow evidence using cdxgen evinse, including Go analysis via Golem and Rust analysis via Rusi, and…

    1.1k GitHub stars~1.9k tokensUpdated yesterday
    Auto-check passed

  • Bom Explore

    cdxgen/cdxgen

    Explores and triages a CycloneDX BOM interactively with the cdxi REPL, using built-in commands for dependency trees, licenses, services, cryptographic assets, audit findings, evidence occurrences…

    1.1k GitHub stars~1.2k tokensUpdated yesterday
    Auto-check passed

  • Bom Signing

    cdxgen/cdxgen

    Signs and verifies CycloneDX BOMs using cdxgen's native JSON Signature Format (JSF) implementation via cdx-sign and cdx-verify, supporting granular component, service, and annotation signatures…

    1.1k GitHub stars~1.5k tokensUpdated yesterday
    Auto-check passed

  • Bom Convert Validate

    cdxgen/cdxgen

    Converts CycloneDX BOMs to SPDX 3.0.1 JSON-LD or between CycloneDX spec versions with cdx-convert, and validates BOMs against JSON schema, deep consistency checks, and OWASP SCVS and EU Cyber…

    1.1k GitHub stars~1.5k tokensUpdated yesterday
    Auto-check: warnings

Categories

Questions about Runtime Trace Bom

What does Runtime Trace Bom do?

Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and…. Runtime Trace Bom is an agent skill from cdxgen/cdxgen. Produces a dynamic CycloneDX BOM by executing a command under the cdxgen safer-exec sandbox with tracebom, tracing dlopen shared-library loads, eBPF HTTP URL access, cryptographic library and cipher-suite usage, child process execution, and filesystem mutations.

When should I use Runtime Trace Bom?

Runtime Trace Bom fits situations like: asked what a program actually loads; calls at runtime; observe a binarys real behaviour; trace network and crypto usage of a process.

How do I install Runtime Trace Bom in Claude Code?

Run `npx skills add cdxgen/cdxgen --skill runtime-trace-bom -a claude-code`. Or copy the skill folder (claude-plugin/skills/runtime-trace-bom in cdxgen/cdxgen) into .claude/skills/runtime-trace-bom in your project. Claude Code loads it when a task matches its description.

How do I install Runtime Trace Bom in Codex?

Run `npx skills add cdxgen/cdxgen --skill runtime-trace-bom -a codex`. Or copy the skill folder (claude-plugin/skills/runtime-trace-bom in cdxgen/cdxgen) into .agents/skills/runtime-trace-bom in your project. Codex loads it when a task matches its description.

Can I use Runtime Trace Bom in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cdxgen/cdxgen --skill runtime-trace-bom -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/runtime-trace-bom, .gemini/skills/runtime-trace-bom, .github/skills/runtime-trace-bom and .opencode/skills/runtime-trace-bom in your project.

What does Runtime Trace Bom need to run?

SKILL.md names no scripts, command-line tools or credentials: Runtime Trace Bom is instructions for the agent only.

Does Runtime Trace Bom access the network?

SKILL.md names 1 domain. As links in the text: cdxgen.github.io. This is read from the text; nothing was executed.

Is Runtime Trace Bom safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Runtime Trace Bom use?

Runtime Trace Bom is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Runtime Trace Bom use?

About 2k tokens (SKILL.md is roughly 7.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Runtime Trace Bom?

Skills that share tags, products or a category with Runtime Trace Bom: Security Review (valory-xyz/open-autonomy, 129 stars), Implementing Sigstore For Software Signing (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Skill Scanner (getsentry/skills, 1k stars) and Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 479 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Runtime Trace Bom?

cdxgen (a GitHub organization) maintains it in cdxgen/cdxgen, which has 1,085 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 6, 2026.

Source: cdxgen/cdxgen on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.